Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Woocommerce OpenPos <= 7.0.1 - Missing Authorization to Information Exposure
Send email only on Reply to My Comment <= 1.0.6 - Reflected Cross-Site Scripting
Internal Link Juicer: SEO Auto Linker for WordPress <= 2.24.3 - Cross-Site Request Forgery
ARForms Form Builder <= 1.6.7 - Reflected Cross-Site Scripting
Point <= 1.1 - Cross-Site Request Forgery
PayPlus Payment Gateway <= 7.0.7 - Authenticated (Subscriber+) SQL Injection
Web Directory Free <= 1.7.1 - Reflected Cross-Site Scripting
SociallyViral <= 1.0.10 - Cross-Site Request Forgery
Gum Elementor Addon <= 1.3.5 - Authenticated (Editor+) Stored Cross-Site Scripting
Woocommerce OpenPos <= 6.4.4 - Unauthenticated Arbitrary File Deletion
User Activity Log Pro <= 2.3.4 - Missing Authorization
Seraphinite Accelerator Premium <= 2.21.13 - Cross-Site Request Forgery to Arbitrary File Deletion
SmartMag < 10.1.0 - Unauthenticated Sensitive Information Exposure via Log Files
CZ Loan Management <= 1.1 - Unauthenticated SQL Injection
WpStickyBar – Sticky Bar, Sticky Header <= 2.1.0 - Reflected Cross-Site Scripting
Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery
BuddyBoss Theme <= 2.4.61 - Cross-Site Request Forgery
Simple Post Notes <= 1.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Premium Addons for Elementor <= 4.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting
Business Card <= 1.0.0 - Authenticated (Admin+) Arbitrary File Uplaod
Zephyr Project Manager <= 3.3.97 - Authenticated (Editor+) Stored Cross-Site Scripting
WP Accessibility Helper (WAH) <= 0.6.2.9 - Missing Authorization
Responsive Tabs <= 4.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.